If an email is rejected (do you use RBLs?) as spam then it's never accepted into the server and you can find details in the log files, if it's above the tag percentage then it might be a false positive and in the user's Junk folder and if it's above the kill percentage then it's spam and removed. ZCS spam handling is the same as previous versions.